Security restrictions bypass in RubyGems - CVE-2016-7798

Vulnerability identifier: #VU8121

CSH Severity: Low

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-7798

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to the openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key. A remote attacker can bypass the encryption protection mechanism and gain access to the system.

RubyGems
Debian Linux
Amazon Linux AMI
Fedora
EMC Integrated Data Protection Appliance
Dell EMC Data Protection Search
ruby

Update to version 2.4.0.

EMC Integrated Data Protection Appliance - update to 2.7.1
Dell EMC Data Protection Search - update to 19.6.0
ruby - addressed in versions 2.3.3-62.fc24, 2.3.3-62.fc25

• https://github.com/ruby/openssl/issues/49

• Debian update for ruby
• Amazon Linux AMI update for ruby23
• Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance
• Multiple vulnerabilities in Dell EMC Data Protection Search
• Fedora 25 update for ruby
• Fedora 24 update for ruby